1. Who we are
Blog Fairy is operated by Adam Large, acting as the data controller for personal data processed through blog-fairy.com and the Blog Fairy service (the "Service"). You can contact us at support@blog-fairy.com.
2. The data we collect
- Account data: name, email address, login credentials, profile settings.
- Content data: prompts, generated posts, drafts, scheduled posts and any content you upload or connect via integrations (e.g. WordPress).
- Integration data: tokens, site URLs and metadata needed to publish to connected platforms.
- Support data: messages you send us through contact forms or email.
- Usage and device data: IP address, browser, device identifiers, pages viewed and basic telemetry needed to operate and improve the Service.
- Billing data: handled directly by Paddle (see "Sharing" below). We receive limited information such as subscription status, plan and invoice references.
3. Why we use it
- To create your account and provide the Service (contract performance).
- To generate, schedule and publish content on your behalf (contract performance).
- To provide customer support (contract performance / legitimate interests).
- To secure the Service and prevent fraud or abuse (legitimate interests / legal obligation).
- To improve features and fix bugs (legitimate interests).
- To send service updates and, with your consent, marketing emails (consent / legitimate interests). You can unsubscribe at any time.
- To comply with legal and tax obligations (legal obligation).
4. Sharing your data
We share personal data only with:
- Service providers / subprocessors we rely on to run the Service, including cloud hosting, database, email delivery and analytics providers.
- Paddle.com Market Ltd, our Merchant of Record, which handles payments, subscription billing, tax compliance and invoicing on our behalf.
- AI model providers who process your prompts to generate content.
- Professional advisers (e.g. accountants, lawyers) where necessary.
- Authorities where required by law or to protect our rights.
We do not sell your personal data.
5. International transfers
Some of our service providers are based outside the UK and the EEA. Where personal data is transferred internationally we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or adequacy decisions.
6. How long we keep it
We keep personal data only as long as needed for the purposes above. Account and content data is kept while your account is active and for a reasonable period afterwards (typically up to 12 months) so you can reactivate. Billing records are kept for as long as legally required (usually 6–7 years). After that, data is deleted or anonymised.
7. Your rights
Under UK and EU GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased in certain circumstances;
- restrict or object to certain processing;
- receive your data in a portable format;
- withdraw consent where processing is based on consent;
- lodge a complaint with a supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk).
To exercise any of these rights, email support@blog-fairy.com. We aim to respond within one month.
8. Security
We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls and least-privilege principles for our systems. No system is 100% secure, but we work to minimise risk and respond quickly to any incidents.
9. Cookies
We use essential cookies to keep you signed in and to operate the Service. We may also use limited analytics cookies to understand how the Service is used. Where required by law, we ask for your consent before setting non-essential cookies. You can manage cookie preferences in your browser.
10. Changes to this notice
We may update this notice from time to time. Material changes will be communicated through the Service or by email.